Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-63342 · Microsoft / collected KEV context

EUVD-2026-83977

GHSA-g26x-m427-f48f

GO-2026-6567

cve-program · CVE-2026-63342

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f
• https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb

euvd · EUVD-2026-83977

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f
• https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb

nvd · CVE-2026-63342

• https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb
• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f

osv · GHSA-g26x-m427-f48f

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f
• https://nvd.nist.gov/vuln/detail/CVE-2026-63342
• https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb
• https://github.com/hatchet-dev/hatchet

osv · GO-2026-6567

• https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f
• https://nvd.nist.gov/vuln/detail/CVE-2026-63342
• https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb

No related operational record is retained in the current change model.